'Everbridge Warns Of Corporate Systems Breach Exposing Business Data' - Bleeping Computer
'Everbridge Warns Of Corporate Systems Breach Exposing Business Data' - Bleeping Computer
Everbridge, an American software company focused on crisis management and public warning solutions, notified customers that unknown attackers had accessed files containing business and user data in a recent corporate systems breach.
美國軟件公司Everbridge專注於危機管理和公共警報解決方案，通知客戶最近公司系統遭受攻擊者訪問包含業務和用戶數據的文件。
The company provides public warning, crisis management, and risk intelligence services to over 6,500 customers worldwide, including the U.S. Army, the Hartsfield-Jackson Atlanta International Airport, and the countries of Norway and Australia, among others.
該公司向全球6500多個客戶提供公共警報、危機管理和風險情報服務，包括美國軍方、亞特蘭大亞特蘭大國際機場和挪威、澳洲等國家。
The attackers were detected on the company's network last Tuesday, May 21. They breached Everbridge's corporate systems using information collected in a previous phishing attack targeting some of its employees.
攻擊者於5月21日星期二被發現進入公司網絡，利用在之前針對其部分員工的網絡釣魚攻擊中收集的信息入侵了Everbridge的公司系統。
Jeff Young, Everbridge's Vice President of Corporate Communications, told BleepingComputer that no evidence indicates a ransomware attack and that the company promptly notified relevant law enforcement agencies of the incident.
Everbridge的企業傳媒副總裁傑夫·楊告訴BleepingComputer，沒有證據表明勒索軟件攻擊，並稱公司迅速通知了相關執法機構。
"While our investigation is ongoing and in its early stages, we are aware that the unauthorized party responsible for this activity has accessed a limited number of files on our corporate network containing certain business related data, including instances of admin user and limited other users' contact information, information about the subscribed Everbridge services, and enabled access methods," the company told customers in a breach notification seen by BleepingComputer.
該公司在泄漏通知中告訴客戶：雖然我們的調查仍在進行中且處於早期階段，但我們已經知道，負責該活動的未經授權方已訪問了公司網絡上少量含有某些業務相關數據的文件，包括管理員用戶和少量其他用戶的聯繫信息，有關已訂閱的Everbridge服務的信息以及已啓用的訪問方法。
A source close to the investigation told BleepingComputer that customer information was exposed in the corporate data accessed by the threat actors, and those impacted are being notified.
接近調查的消息人士告訴BleepingComputer，威脅演員在訪問公司數據時公開了客戶信息，並通知受影響的客戶。
The same source said that Everbridge is working with incident response experts from Mandiant and Stroz Friedberg to assess the attack's severity and impact.
同一消息人士表示，Everbridge正在與Mandiant和Stroz Friedberg的事件響應專家合作，評估襲擊的嚴重程度和影響。
MFA required on all accounts by June 3
將於2024年6月3日要求所有帳户使用多因素身份驗證
Given the increasing risk of phishing attacks, Everbridge also shared information with each account administrator on how to identify and guard against such attacks and urged customers to enable multi-factor authentication (MFA). This additional layer of protection will also be force-enabled on all accounts by Monday.
鑑於網絡釣魚攻擊的風險越來越高，Everbridge還向每個帳户管理員共享如何識別和防範此類攻擊的信息，並敦促客戶啓用多因素身份驗證（MFA）。此外，該公司還將在週一強制啓用所有帳户的額外保護層。
"We strongly encourage all customers to enable MFA on all administrator accounts, and we will be accelerating enforcement of MFA for all customers in the coming days," the company said.
該公司表示：“我們強烈建議所有客戶在所有管理員帳户上啓用MFA，並將在未來幾天加速對所有客戶強制實施MFA。”
"Everbridge will enable multi-factor authentication (MFA) for all accounts by June 3, 2024. If your organization supports Single Sign-On (SSO), we strongly recommend you enable SSO for your Everbridge login as soon as possible."
“Everbridge將於2024年6月3日爲所有帳户啓用多因素身份驗證（MFA）。如果您的組織支持單點登錄（SSO），我們強烈建議您儘快啓用SSO進行Everbridge登錄。”
Everbridge began operating in 2002 as 3N Global and went public in 2016 on the Nasdaq stock exchange following a $90 million IPO. In 2023, it reported revenues of $449 million and now has more than 1,800 employees.
Everbridge於2002年作爲3N Global開始運營，並在2016年通過9000萬美元的首次公開募股在納斯達克證券交易所上市。2023年，其報告收入爲$449 million，現在擁有超過1800名員工。
The company says it provides public warning, crisis management, and risk intelligence services to over 6,500 customers worldwide, including the U.S. Army, the Hartsfield-Jackson Atlanta International Airport, and the countries of Norway and Australia, among others.
該公司表示，向全球超過6500個客戶提供公共警報、危機管理和風險情報服務，包括美國軍方、亞特蘭大亞特蘭大國際機場和挪威、澳洲等國家。
Investment giant Thoma Bravo agreed to take Everbridge private on March 1, 2024, in a $1.8 billion all-cash deal.
投資巨頭托馬·布拉沃（Thoma Bravo）於2024年3月1日同意以18億美元的全現金交易方式將Everbridge私有化。
譯文內容由第三人軟體翻譯。